Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File:                     kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier:          U2mwfgb0BPT/kbTwFWMf3kc/wZfMrj5PkGUqH7NTMO0=
Subject key identifier:   23:79:26:DD:C1:7A:15:84:77:CD:5C:C5:19:B8:ED:48:38:81:DE:FD
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer:       /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial:       01901E58E54308A22A432F96FD637A98FE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:00 +0000
Files and hashes:         1: 5gvCIZSJlUxGQWrlwO1eWd6pBCM.roa (hash: zXLo9l4Gg2uAiMyqQz3Vxae2/WG7YV5YzMihBW0aGk8=)
                          2: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: 6ctd3Hih3JInU8Hibg1OoYjM7xbPkftLyAZfuyrvQpQ=)
                          3: sDeaKoGfn1tlid9YsAUbCjVdHDw.roa (hash: AHS6ipfEzAEoBd7xQmqrm4ClnfrKSsrPBhhRPCaTFsc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e5:43:08:a2:2a:43:2f:96:fd:63:7a:98:fe:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
        Validity
            Not Before: Jun 16 00:01:00 2024 GMT
            Not After : Jun 17 00:01:00 2024 GMT
        Subject: CN=237926ddc17a158477cd5cc519b8ed483881defd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:d5:32:1c:be:30:66:7e:da:93:88:77:cb:
                    62:ac:dd:aa:67:29:ee:03:ba:ee:8a:6a:a4:df:7b:
                    23:62:86:52:2f:62:ab:f7:6d:30:20:22:33:37:76:
                    0e:35:11:d4:20:a0:66:2e:e9:f1:4d:83:40:15:fa:
                    0b:cf:61:93:97:06:1f:62:ea:03:d9:e0:ff:aa:fa:
                    38:4d:c4:00:ee:ef:8f:76:e5:ad:82:ac:7b:4e:4c:
                    50:bb:61:62:6b:2b:1a:8e:36:e6:eb:ae:d0:a7:17:
                    45:14:15:6c:69:21:2e:e9:ac:f4:71:2f:f4:3e:ab:
                    3b:2d:95:b2:c8:f0:53:61:46:0f:c7:c9:5e:9a:38:
                    9f:d0:ba:a0:d6:03:6e:43:40:2b:56:b3:c8:86:ec:
                    36:5a:6f:9a:9f:84:8f:e7:eb:d5:a9:e6:f3:1e:7b:
                    8c:e0:e8:f0:cc:9f:a2:54:76:eb:94:c2:9e:fe:5d:
                    a6:fe:73:67:42:ea:4c:75:01:51:8d:cc:f9:66:b3:
                    79:e9:69:de:56:28:72:43:40:8f:00:01:45:93:72:
                    37:8f:2f:d1:53:37:eb:2c:43:c0:8c:ac:37:a1:41:
                    43:0b:f6:71:46:f0:b8:4f:07:f8:4b:c7:fd:14:0c:
                    c9:02:c8:0e:a0:24:ab:5d:ec:b7:e3:ea:25:6d:72:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:79:26:DD:C1:7A:15:84:77:CD:5C:C5:19:B8:ED:48:38:81:DE:FD
            X509v3 Authority Key Identifier:
                keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:b3:b3:c0:b6:08:c2:48:32:37:48:44:5f:b4:fc:f4:23:
         da:44:14:b3:a2:ff:5b:54:bc:a6:c4:26:74:55:13:4f:3d:fe:
         e9:28:7c:90:16:33:ee:e7:1d:40:a4:f3:ca:be:55:be:ce:7a:
         60:a0:b1:5f:1f:a8:19:ac:4f:cd:92:41:cd:ff:28:51:39:f3:
         6a:9c:76:5d:c6:18:0a:23:fd:63:d1:54:18:e8:a1:bb:38:da:
         1c:8b:30:c9:f7:c8:c7:da:94:d5:05:58:48:62:71:24:1d:0d:
         c0:c2:a0:3e:0a:21:83:12:16:65:67:71:e0:54:f0:70:bc:71:
         25:88:b7:23:03:b2:60:59:ab:5d:c0:b5:47:b7:61:3e:04:6f:
         d9:cb:40:dc:7c:6e:30:6a:12:4e:eb:b3:82:c1:55:58:b5:55:
         29:ce:fc:58:0d:9a:a5:1a:f3:27:8b:c8:fa:de:1e:64:5e:b4:
         3b:fc:4e:53:d7:1d:2d:a5:a6:07:91:0f:05:0a:e7:4c:d0:e7:
         02:25:4a:ab:c8:51:3a:73:ee:02:1f:fc:c9:8e:18:6b:a7:d2:
         06:28:da:ff:5c:c8:4d:91:c4:73:05:25:b1:4f:de:bf:6d:49:
         ac:f0:3a:b7:53:7d:a7:e7:2f:6e:d1:e1:32:fb:21:56:21:8f:
         d3:fb:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:47:01 2024 by rpki-client on console-fra.rpki-client.org